Your personal data and your privacy are very important to us. As part of our data protection declaration, we will inform you which personal data we collect, how and where we store it and how we use it. If you are under the age of 16, you need the consent of your legal guardian to use our website. We look forward to your visit of our website 'epica.cc' and your interest in our company and our offers. Despite careful control of the content, we assume no liability for external links to third-party content, since we have not ordered the transmission of this information, we have not selected or changed the addressee of the transmitted information and the transmitted information itself. The protection of your personal data during the collection, processing and use during your visit to our website is important to us and takes place within the framework of the legal regulations, about which you e.g. can inform at www.bfdi.bund.de. Below we explain what information we collect during your visit to our website and how it is used:
Each time a customer (or other visitor) accesses our website, information is automatically sent to the server of our website by the internet browser used on your end device (computer, laptop, tablet, smartphone, etc.). This information is temporarily stored in a so-called log file. The following data is recorded without your intervention and stored until it is automatically deleted:
Our legitimate interest acc. Art. 6 para. 1 sentence 1 lit. f GDPR for the collection of data is based on the following purposes: ensuring a smooth connection and comfortable use of the website, evaluation of system security and stability as well as for other administrative purposes. Under no circumstances do we use the data collected for the purpose of drawing conclusions about you personally.
If you log in to our service via one of the social logins (Google or Facebook), we will get a login ID back from the provider used. We use this login ID as identification features in order to recognize you in the future when you use it again. We do not receive any other information / data about you via the social login. We save all the additional settings you have made in connection with your individual login ID, so that in future you can easily log in again with just one click using the social login you are using.
To use our core service, the visualization of your sporting activities, you need to connect at least one of the two services: Strava or Garmin. You can use the respective Connect buttons for this. If you cancel the process within the initial connection process, we will not process or save any of your data provided from Strava or Garmin. By means of the successfully established connection, you enable us to access your activity and account data from the respective service. We use this data (e.g. your user ID, activity information such as route length, speed, altitude, time, heart rate, watts, photos associated with the activity, and the route of the activity) to display your activities in our selection list and for the creation of your individualized visualizations. You can disconnect the respective service (Strava or Garmin) in your settings at any time or, in the case of a temporary Strava session, by logging out. Some of the third-party providers (e.g. Strava) allow you to create so-called "private zones" in which your exact position is hidden. Please note that not all third-party providers take this function into account when passing on your data to us, but pass on the unfiltered raw data. If you see your exact route within your "private zone" through our service, please contact the third party provider directly and ask them to not provide this data via their API in the future. We have no knowledge of "private zones" settings within the third-party providers.
If you have any questions, we offer you the opportunity to contact us using the form provided on the website. At least the following information is required: Email and name so that we know who the request came from and to be able to answer it. Further information can be provided voluntarily. Data processing for the purpose of contacting us is carried out in accordance with Art.6 para. 1 sentence 1 lit. a GDPR based on your voluntarily given consent. The personal data collected by us for the use of the contact form will be automatically deleted after your request has been dealt with.
When entering into a contractual relationship on our website, we ask you to provide the following personal data:
Other personal data that we are legally obliged or entitled to collect and process and that we need for your authentication, identification or for validation of the data we collect. The data mentioned will be processed to process the contractual relationship. The data is processed on the basis of Art. 6 Para. 1 lit. b GDPR. The storage period is limited to the purpose of the contract and, if available, statutory and contractual retention requirements.
To enable you to pay for purchases that result from legally binding contracts within our online shop we also work with payment service providers. We will pass on your payment data to the commissioned payment service provider as part of the payment processing - earmarked for the payment - if this is necessary for the payment processing. The legal basis for the transfer of data is Art. 6 Para. 1 lit. b GDPR.
If you have in accordance with Art. 6 Para. 1 S. 1 lit. a DSGVO expressly consented, we use your email address to regularly send you our newsletter. You can unsubscribe at any time, for example via a link at the end of a newsletter. Alternatively, you can send your unsubscribe request at any time by email (ideally with the subject: "Unsubscribe newsletter" to firstname.lastname@example.org).
Your data will not be transmitted to third parties for purposes other than those listed below. We only pass your data on to third parties if:
In these cases, however, the amount of data transmitted is limited to the minimum required. Our data protection regulations are in accordance with the applicable data protection regulations and the data are only processed in the Federal Republic of Germany / European Union. A transfer to third party countries does not take place and is not intended.
On request, we will be happy to inform you whether and which personal data about you are stored (Art. 15 GDPR), in particular about the processing purposes, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to lodge a complaint, the origin of your data, unless it was collected by us, and the existence of automated decision-making, including profiling. You also have the right to have any incorrectly collected personal data corrected or to have incompletely collected data completed (Art. 16 GDPR). You also have the right to request that we restrict the processing of your data, provided that the legal requirements for this are met (Art. 18 GDPR). You have the right to receive the personal data concerning you in a structured, common and machine-readable format or to request the transfer to another person responsible (Art. 20 GDPR). In addition, you have the so-called "right to be forgotten", i.e. You can ask us to delete your personal data if the legal requirements are met (Art. 17 GDPR). Irrespective of this, we will automatically delete your personal data if the purpose of the data collection no longer applies or the data processing has been carried out illegally. According to Art. 7 Para. 3 GDPR, you have the right to withdraw your consent given to us at any time. As a result, we are no longer allowed to continue processing data based on this consent in the future. You also have the right to object to the processing of your personal data at any time, provided that a right to object is provided for by law. In the event of an effective revocation, your personal data will also be automatically deleted by us (Art. 21 GDPR). If you would like to exercise your right of withdrawal or objection, please send an email to: email@example.com In the event of violations of data protection regulations, you have Art. 77 GDPR the possibility to lodge a complaint with a supervisory authority.
The data collected will be stored by us for as long as this is necessary for the execution of the contracts entered into with us or as long as you have not exercised your right to deletion or your right to transfer data to another company.
We take all necessary technical and organizational security measures to store your personal data in such a way that they are neither accessible to third parties nor to the public. If you want to contact us by email, we would like to point out that the confidentiality of the information transmitted cannot be fully guaranteed with this communication channel. We therefore recommend that you send us confidential information only by post.
This data protection declaration is currently valid. Due to the further development of our website and offers about it or due to changed legal or official requirements, it may be necessary to change this data protection declaration. You can access and print out the current data protection declaration at any time on the website at https://epica.cc/privacy.
This data protection information applies to data processing by:
Responsible: EPICA UG (haftungsbeschränkt) i. Gr.
Hoyer Bogen 16